In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to create a UAF which can be abu…
高危 CVSS 7.8
摘要
In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to create a UAF which can be abused for privilege escalation with the following script Step 1. create root qdisc tc qdisc add dev lo root handle 1:0 drr step2. a class for packet aggregation do demonstrate uaf tc class add dev lo classid 1:1 drr step3. a class for nesting tc class add dev lo classid 1:2 drr step4. a class to g…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/38646749d6e12f9d80a08d21ca39f0beca20230d Patch
- https://git.kernel.org/stable/c/46c59ec33ec98aba20c15117630cae43a01404cc Patch
- https://git.kernel.org/stable/c/73c7e1d6898ccbeee126194dcc05f58b8a795e70 Patch
- https://git.kernel.org/stable/c/7e2bd8c13b07e29a247c023c7444df23f9a79fd8 Patch
- https://git.kernel.org/stable/c/bc50835e83f60f56e9bec2b392fb5544f250fb6f Patch
- https://git.kernel.org/stable/c/cd796e269123e1994bfc4e99dd76680ba0946a97 Patch
- https://git.kernel.org/stable/c/deda09c0543a66fa51554abc5ffd723d99b191bf Patch
- https://git.kernel.org/stable/c/fe18c21d67dc7d1bcce1bba56515b1b0306db19b Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
时间线
- nvd_ingest NVD